|
Message-ID: <20190125215522.GF23924@voyager> Date: Fri, 25 Jan 2019 22:55:22 +0100 From: Markus Wichmann <nullplan@....net> To: musl@...ts.openwall.com Subject: Re: Infinite loop in malloc Hi all, one more idea I just had: This might be a use-after-free bug. If the program had clobbered the chunk pointers, the a_and_64() in unbin() wouldn't be triggered, leading to the infinite loop described in the OP. Ciao, Markus
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.